SDFix: Version 1.201
Run by Familia on 05-07-2008 at 23:46

Microsoft Windows XP [Versi¢n 5.1.2600]
Running From: C:\ARCHIV~1\SDFix

Checking Services :

Name :
Distributed Allocated Memory Unit

Path :
"C:\WINDOWS\system32\dllcache\mravsc32.exe"

Distributed Allocated Memory Unit - Deleted



Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\WINDOWS\system32\TFTP1120 - Deleted
C:\WINDOWS\system32\TFTP2852 - Deleted
C:\WINDOWS\system32\TFTP3324 - Deleted
C:\WINDOWS\system32\i - Deleted





Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-05 23:49:28
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\syste m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\syste m32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files :


File Backups: - C:\ARCHIV~1\SDFix\backups\backups.zip

Files with Hidden Attributes :

Thu 19 Aug 2004 60,416 A.SH. --- "C:\Archivos de programa\Outlook Express\msimn.exe"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\04261151 57f44685aa3b8fbbf1b2d379\BIT21.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\14d7477f 0c56394bdc843df26dc90a04\BIT260.tmp"
Sat 5 Jul 2008 617,736 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\1dca42e2 96e6196976528833892b7777\BITB9.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\1ed95b7f cb92bdaaecaf8755eae7a533\BIT1E.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\4d75c588 431080965344fc0eaa120c94\BIT1D.tmp"
Sat 5 Jul 2008 1,028,408 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\4db22f8a d26aae7e2a737ff9b34df5d7\BIT145.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\53d2e801 8768dc24b1c5df738d0ec611\BIT263.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\6f482b51 6df16c00eeda502bfc6d1623\BIT404.tmp"
Sat 5 Jul 2008 2,380,040 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\97841b5f 9db9a2ea85e0031764f42b21\BIT1F.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\99879fa5 6d4a9ffc5a1e0ad8dd49af69\BIT270.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\a375be71 b4b79b3ab06a48f28abaa428\BIT413.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\a4effd7d 77f9f4153c569dc37412deae\BIT411.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\b214ef59 784322f63fac8c2965731009\BIT1F.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\c0a632b8 a535a39e94df5d640e9aaf87\BIT410.tmp"
Sat 5 Jul 2008 572,728 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\c2214862 caaebdd5391f0411eeb830cf\BIT3F8.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\df157dd8 27733ef484f1609f6558c1bf\BIT18.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\e0baf2d8 d73f10a9e60b3349ac892a7b\BIT20.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\f016954e 247ea3971a4a978a28f3f35b\BIT40F.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\f6c71e2e 1e5d45ba7c04c7988cef1c36\BIT400.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\164a1873 ba5785baeccc27b1fdcac7f7\download\BIT25B.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\1a8629fa 6a208334583536acfc68eda0\download\BIT3F6.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\2502d610 9bdb13952cf8e703c2bf636a\download\BIT409.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\64f208ce da3403c85902d6b8a7b73f6c\download\BIT3FE.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\72f45929 af6f397e3e70fae1dd845c1a\download\BIT3FF.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\74829727 ea54be176ee77abb81ef2a18\download\BIT40A.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\9911b847 391ac6811ed8f3905d49e44e\download\BIT40E.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\b6244cba 29aaf21c681dc1069076d62e\download\BIT3FD.tmp"
Fri 10 Jun 2005 322,690 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\cd64f7be 0f8f11545f08742a5effcdb9\download\BIT403.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\ddba9550 e0e5854236a9805a3755891c\download\BIT40D.tmp"
Sat 5 Jul 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\f88c58a2 b3ab1d7ffb41db475f24bf2e\download\BIT412.tmp"

Finished!




KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, July 6, 2008
Operating System: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Saturday, July 05, 2008 18:24:44
Records in database: 916362
Scan settings
Scan using the following database extended
Scan archives yes
Scan mail databases yes
Scan area My Computer
C:\
D:\
Scan statistics
Files scanned 25753
Threat name 0
Infected objects 0
Suspicious objects 0
Duration of the scan 00:39:35

No malware has been detected. The scan area is clean.
The selected area was scanned.

...tonces...podriamos decir...q...ejemm...ta solucionado...no?

Efectivamente Amigo Shnow,

El SDFix ya eliminó lo escondido y ahora el reporte del KAspersky sale limpio,
si no hay mas dudas damos por solucionado el tema.

Suerte ......





PD: Vuelve a activar restaurar sistemas.

woooo...yeah, por fin, no podia ser q a la primera prendida del pc y se infectara hipso factus...
muxas gracias an_leg...de tan infectado q qedo el pc creo q ahora ta mas protegido q nunk xD...




wtF!!!!!...se me habia olvidado xD...






Saludos